3 commits

Author	SHA1	Message	Date
senke	cd974172cb	v0.9.4	2026-03-05 23:03:43 +01:00
senke	142d1576be	fix(security): add SSRF protection for webhook URL registration ... SEC-07: Strengthened ValidateWebhookURL to require HTTPS only (was allowing HTTP). Private IP ranges, localhost, and cloud metadata endpoints remain blocked.	2026-02-22 17:31:10 +01:00
senke	15c3919311	security(webhooks): extract SSRF validation to internal/validators/url_validator	2026-02-14 18:24:39 +01:00